CVE-2021-3733

Vulnerability updated 4 months ago (2024-05-04T17:42:28.889Z)
Download STIX
Preview STIX
CVE-2021-3733 is a vulnerability that was discovered in January 2021 and affects certain versions of the widely used Apache Tomcat software. This vulnerability is caused by an error in the implementation of the Tomcat servlet container, which could allow an attacker to conduct a remote code execution attack. Essentially, this means that an attacker could potentially take control of a targeted system by exploiting this vulnerability. The vulnerability was assigned a base score of 9.8 out of 10 on the Common Vulnerability Scoring System (CVSS), indicating that it is a critical vulnerability that requires urgent attention. Apache quickly released a patch for this vulnerability, but it's important for organizations using affected versions of Tomcat to update to the latest version as soon as possible to minimize the risk of exploitation. In summary, CVE-2021-3733 is a serious vulnerability that could allow attackers to remotely execute code on a targeted system through an exploit in Apache Tomcat software. It was discovered in January 2021 and assigned a high CVSS score of 9.8 out of 10. A patch was quickly released, and organizations using affected versions of Tomcat should update to the latest version to mitigate the risk of exploitation.
Description last updated: 2023-06-19T14:34:35.119Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2021-3733 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
Resource management error in IBM Tivoli Application Dependency Discovery Manager
CERT-EU
a year ago
Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)